registry / blokctl / 2.3.0

blokctl@2.3.0

cli for blok

AI Security Review

scanned 25d ago · by lpm-firewall-ai

When the CLI is run, it sends telemetry containing all tracked command options, including authentication tokens, to PostHog. This is concrete credential exfiltration rather than ordinary aggregate telemetry.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Running `blokctl login --token` or `blokctl profile --token`.

Impact

Mechanism

Unsanitized command-option telemetry to an external analytics service.

Attack narrative

The CLI constructs analytics by default and wraps commands in a tracker that copies their entire option object into a PostHog event. The login command accepts a token option and forwards that object unchanged; the profile command does the same for a Prometheus token. The telemetry client also sends hostname-derived identity and system properties. Consequently, a normal user-invoked authentication command can transmit credentials to the external analytics endpoint.

AI rationale

Source directly connects token-bearing command options to a default external telemetry capture path. The absence of npm lifecycle hooks does not mitigate this runtime credential disclosure.

Evidence

dist/services/posthog.jsdist/services/commander.jsdist/commands/login/index.jsdist/commands/profile/index.js$HOME/.blok/blokctl.json

Network endpoints1

Decision evidence

public snapshot

AI called this Malicious at 98.0% confidence as Malware with low false-positive risk.

Evidence for block

Default telemetry sends command arguments and errors to PostHog.
The login command passes its token-bearing options into that telemetry path.
The profile command likewise forwards a Prometheus authentication token.
Telemetry includes a stable hostname-derived identifier and runs unless an unrelated opt-out variable is set.
Command execution tracking forwards its arguments to the analytics service.

Evidence against

package.json contains no npm preinstall, install, postinstall, or prepare hook.
No self-dependency on blokctl is declared.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

9 flagged

dist/index.jsView file

Lines 1-21javascript

1#! /usr/bin/env bun

2import child_process from "node:child_process";

3import os from "node:os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L1

4import util from "node:util";

5import * as p from "@clack/prompts";

6import fsExtra from "fs-extra";

7import color from "picocolors";

8import { checkProject } from "./commands/check/index.js";

9import { createNode } from "./commands/create/node.js";

10import { createProject } from "./commands/create/project.js";

11import { createWorkflow } from "./commands/create/workflow.js";

12import { devProject } from "./commands/dev/index.js";

13import { program, withErrorBoundary } from "./services/commander.js";

14import { setNonInteractive } from "./services/non-interactive.js";

15import { PosthogAnalytics } from "./services/posthog.js";

16import { getPackageVersion } from "./services/utils.js";

17import "./commands/login/index.js";

18import "./commands/logout/index.js";

19import "./commands/build/index.js";

20import "./commands/deploy/index.js";

21import "./commands/monitor/index.js";

dist/scaffold-repo/triggers/websocket/src/WebSocketTrigger.tsView file

Lines 381-421typescript

381

382 return {

383 onOpen: (_event, ws) => {

384 void (async () => {

385 const

dist/services/posthog.jsView file

Lines 1-29javascript

1import { randomUUID } from "node:crypto";

2import { existsSync, readFileSync, writeFileSync } from "node:fs";

3import os from "node:os";

4import { PostHog } from "posthog-node";

dist/scaffold-repo/sdks/python3/bin/worker.pyView file

•path = dist/scaffold-repo/sdks/python3/bin/worker.py kind = build_helper sizeBytes = 2018 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/scaffold-repo/sdks/python3/bin/worker.pyView on unpkg

dist/scaffold-repo/sdks/python3/tests/test_grpc_server.pyView file

•path = dist/scaffold-repo/sdks/python3/tests/test_grpc_server.py kind = payload_in_excluded_dir sizeBytes = 16016 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

dist/scaffold-repo/sdks/python3/tests/test_grpc_server.pyView on unpkg

dist/commands/generate/NodeFileWriter.jsView file

•matchType = normalized_sha256 matchedPackage = blokctl@2.0.1 matchedPath = [redacted].js matchedIdentity = npm:Ymxva2N0bA:2.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/generate/NodeFileWriter.jsView on unpkg

dist/commands/create/project.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = blokctl@2.2.1 matchedIdentity = npm:Ymxva2N0bA:2.2.1 similarity = 0.967 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/create/project.jsView on unpkg

Source & flagged code

9 flagged · loading source

dist/index.jsView file

1#! /usr/bin/env bun L2: import child_process from "node:child_process"; L3: import os from "node:os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

1Cross-file remote execution chain: dist/index.js spawns dist/commands/create/project.js; helper contains network access plus dynamic code execution. L1: #! /usr/bin/env bun L2: import child_process from "node:child_process"; L3: import os from "node:os"; ... L46: const execResponse = await exec(`npm view ${CLI_NAME} version`); L47: latestVersion = execResponse.stdout.trim(); L48: } ... L68: try { L69: const HOME_DIR = `${os.homedir()}/.blok`; L70: const cliConfigPath = `${HOME_DIR}/blokctl.json`;

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L1

dist/scaffold-repo/triggers/websocket/src/WebSocketTrigger.tsView file

Findings

3 Critical5 High5 Medium5 Low

CriticalHardcoded Runtime Data Exfiltrationdist/services/posthog.js

CriticalTrigger Reachable Dangerous Capabilitydist/services/posthog.js

CriticalPrevious Version Dangerous Deltadist/commands/create/project.js

HighChild Processdist/index.js

HighShell

HighCross File Remote Execution Contextdist/index.js

HighPayload In Excluded Dirdist/scaffold-repo/sdks/python3/tests/test_grpc_server.py

HighKnown Malware Source Similaritydist/commands/generate/NodeFileWriter.js

MediumDynamic Requiredist/scaffold-repo/triggers/websocket/src/WebSocketTrigger.ts

MediumNetwork

MediumEnvironment Vars

Medium

Affected versions and remediation

This report applies to blokctl@2.3.0.

See version security history for other recorded verdicts.

Avoid installing blokctl@2.3.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-13 15:15:02.290Z (UTC).